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Preface 
About Qualys 


Preface 


This guide is intended for application developers who will use the Qualys Out-of-band 
Configuration Assessment API. 


About Qualys 


Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of cloud-based security and 
compliance solutions. The Qualys Cloud Platform and its integrated apps help businesses 
simplify security operations and lower the cost of compliance by delivering critical 
security intelligence on demand and automating the full spectrum of auditing, 
compliance and protection for IT systems and web applications. 


Founded in 1999, Qualys has established strategic partnerships with leading managed 
service providers and consulting organizations including Accenture, BT, Cognizant 
Technology Solutions, Deutsche Telekom, Fujitsu, HCL, HP Enterprise, IBM, Infosys, NTT, 
Optiv, SecureWorks, Tata Communications, Verizon and Wipro. The company is also a 
founding member of the Cloud Security Alliance (CSA). For more information, please visit 
www.qualys.com. 


Contact Qualys Support 


Qualys is committed to providing you with the most thorough support. Through online 
documentation, telephone help, and direct email support, Qualys ensures that your 
questions will be answered in the fastest time possible. We support you 7 days a week, 
24 hours a day. Access support information at www.qualys.com/support/. 
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Chapter 1 - Welcome 


Welcome to Out-of-band Configuration Assessment API guide. 


Get Started 


Qualys API Framework - Learn the basics about making API requests. The base URL 
depends on the platform where your Qualys account is located. 


API Conventions - Get tips on using the Curl command-line tool to make API requests. 


Get API Notifications 
Subscribe to our API Notifications RSS Feeds for announcements and latest news. 


From our Community 
Join our Community 


API Notifications RSS Feeds 


Qualys API Framework 


The Qualys Out-of-band Configuration Assessment API uses the following framework. 


Request URL 
The URL for making API requests respects the following structure: 
https://<baseurl>/<module>/<object>/<object_id>/<operation> 


where the components are described below. 


<baseurl> The Qualys API gateway URL that you should use for 
API requests depends on the platform where your 
account is located. The gateway URL for Qualys US 
Platform 1 is: https://gateway.qg1.apps.qualys.com 


<module> The API module. For the OCA API, the module is: "oca". 
<object> The module specific object. 

<object_id> (Optional) The module specific object ID, if appropriate. 
<operation> The request operation, such as provisioning an asset. 
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Qualys API URL 


The Qualys API URL you should use for API requests depends on the Qualys platform 
where your account is located. 


Click here to identify your Qualys platform and get the API URL 


This documentation uses the API gateway URL for Qualys US Platform 1 
(https://gateway.qg1.apps.qualys.com) in sample API requests. If you're on another 
platform, please replace this URL with the appropriate gateway URL for your account. 
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API Conventions 


Using Curl 


Curl is a multi-platform command-line tool used to transfer data using multiple 
protocols. This tool is supported on many systems, including Windows, Unix, Linux and 
Mac. In this document Curl is used in the examples to build Qualys API requests using the 
HTTP over SSL (https) protocol, which is required. 


Want to learn more? Visit https://curl.haxx.se/ 


The following Curl options are used according to different situations: 


Option Description 

-X The GET, POST, DELETE method are used as per requirement. 

GET/POST/DELET 

E 

-H'Authorization: This option is used to provide a custom HTTP request header parameter 

Bearer <token>' for authentication. Provides the JSON Web Token (JWT) received from 
Qualys authentication API in the following format: Authorization: Bearer 
<token> 

-H'content-type: Denotes that content is in JSON format. 

application/json' 

-H'Content-Type: Denotes that content is in text or plain format. 

text/plain’ 


-d @request.json Provide a request.json file for parameter input. 


--data-urlencode Used to encode spaces and special characters in the URL/Parameter 
values. 


The sample below shows a typical Curl request using options mentioned above and how 
they interact with each other. 


curl -X GET ‘http://<api_gateway_url>/ocaapi/v2.0/technology/PolicyCompliance’ -H 
‘Content-Type: application/json' -H ‘Authorization: Bearer <token>' 
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Note: The following APIs use token-based authentication. 


Fetch Authentication Token 

OCA APIs 

Fetch List of Supported Technologies 
Provision an Asset 

Fetch Asset Status using UUID 

Fetch Supported Commands for a Technology 
Fetch Supported Commands based on Asset UUID 
Upload Command Output for a UUID 

Delete an Asset using UUID 

Provision Assets in Bulk 

Delete Assets in Bulk 

Re-Provision Asset 

Re-Provision Assets in Bulk 


Get status of assets provisioned within given timeframe 
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Fetch Authentication Token 


/auth 
[POST] 


You must authenticate to the Qualys Cloud Platform using Qualys account credentials 
(username and password) and get the JSON Web Token (JWT) before you can start using 
the OCA APIs. 


The Authentication API returns a JSON Web Token (WT) which you can use for 
authentication during OCA API calls. The token expires in 4 hours. You must regenerate 
the token to continue using the OCA API. 


HTTP Status Code 
- 201: Created 


101: Unauthorized user 


- 404: Not Found 


Parameters 

username The username of the Qualys user account for which you want 
to fetch OCA data. 

password The password of the Qualys user account for which you want 
to fetch OCA data. 

token The value should be set to True, to get the generated token. 

ContentType Should be "application/x-www-form-urlencoded" 


gateway.qg1.apps.qualys.com The API gateway URL to the Qualys API server where your 
account is located. 


Sample 


Request: 
curl -X POST 'https://«api gateway url»/auth' -d 
'username-usernameé&password-password&token-true' -H 'ContentType: 
application/x-www-form-urlencoded' 


Response: 


kyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJxdWF5cl9hdzM5IiwibG9naW5SZXNwb25zZ 
SIG6IINVOONFUINGVUwiLCJzdWNjZXNzZnVsQXVOaGVudGljYXRpb251YW5kbGVycyl 
6WyJBdXRoSGFuZGxlcjJdLCJpc3MiOiJxYXMiLCJpcEFkZHJlc3MiOiIxMCA4wLjIwM 
y4xODOiLCJwb3JOYWxVc2VySWOiOjlIzODczNDU1NCwidXNlcnR5cGUiOiJmbyIlsInF 
3Z2WJVc2VySWOiOjMONzkwMjYsImNyZWRlbnRpYWxUeXBlljoiPRRzZXJuYWl11l1UGFzc 
3dvcmRDcmVkzW50aWFslIiwiYXVkIjoicWFzliwibW9kdWxlcOFsbG93ZWOiOlsiQUR 
NSVAiLCJBUIlNFVCBJTIZFTIRPULIKiLCJDRVJUVKIlIFVyItIkZSRUUgQUGFTl1QiLCJQO 
yBTQOFOTKkVSIiwiUFMiLCJRR1MiLCJDQSISIkNFULIRfVklFVyISIktCWCISIk9DOSI 
SIIBPUIRBTCBUOUGHSUSHIiwiVEhSRUFUIFBSTIRFOIOiLCJWTEFOIiwiVkOgQUdFT 
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Fetch List of Supported Technologies 
/ocaapi/v2.0/technology/PolicyCompliance 

[GET] 

To get a list of supported technologies. 


HTTP Status Code 
- 200: OK 


101: Unauthorized user 


- 404: Not found 


Header Parameters 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 

Sample 

Request: 


curl -X GET 
'https://«api gateway url»/ocaapi/v2.0/technology/PolicyCompliance 


' -H 'Content-Type: application/json' -H 'Authorization: Bearer 
«token»' 
Response: 
( 
"Code": 200, 
"data": { 
"items": [ 
{ 
"technology": "ACME Packet OS", 
"createdAt"™: "2019-01-21T07:06:07.000+0000", 
"updatedAt": "™2019-01-21T07:06:07.000+0000", 
"technologyVersion": "ACME Packet OS" 
}, 
{ 
"technology": "ArubaOS", 
"createdAt": "2019-06-07T08:32:43.000+0000", 
"updatedAt": "2020-06-30T11:15:13.000+0000", 
"technologyVersion": "ArubaOS 6" 
), 
{ 
"technology": "ArubaOS", 
"createdAt": "2020-07-30T10:13:03.000+0000", 
"updatedAt": "2020-07-30T10:13:03.000+0000", 
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"technologyVersion": "ArubaOS 8" 


technology": "Cisco ACS", 

"CcreatedAt": "2019-04-02T15:54:18.000+0000", 
"updatedAt": "2019-04-02T15:54:18.000-«0000", 
technologyVersion": "Cisco ACS 5" 


technology": "Cisco FTD", 

createdAt": "2019-09-13T07:01:13.000+0000", 
updatedAt": "2019-09-13T07:01:13.000-«0000", 
technologyVersion": "Cisco FTD 6" 


"technology": "Cisco UCS Manager", 
"createdAt": "2019-06-07T08:32:43.000+0000", 
"updatedAt": "2019-06-07T08:32:43.000+0000", 
"technologyVersion": "Cisco UCS Manager 2" 


"technology": "Cisco WLC", 

"createdAt"™": "2019-09-13T07:01:12.000+0000", 
"updatedAt": "2019-09-13T07:01:12.000+0000", 
"technologyVersion": "Cisco WLC 8" 


technology": "Comware", 

"createdAt": "2019-06-07T08:32:43.000+0000", 
"updatedAt": "2019-06-07T08:32:43.000+0000", 
technologyVersion": "Comware 5" 


technology": "Comware", 

"createdAt": "2019-06-07T08:32:43.000+0000", 
"updatedAt": "2019-06-07T08:32:43.000+0000", 
technologyVersion": "Comware 7" 


"technology": "Data Domain OS", 

"createdAt": "2019-01-21T07:06:07.000+0000", 
"updatedAt": "™2019-01-21T07:06:07.000+0000", 
"technologyVersion": "Data Domain OS 5" 
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technology": "Brocade Fabric", 
createdAt": "2019-01-21T07:06:07.000+0000", 
updatedAt": "2019-06-26T12:11:08.000+0000", 
technologyVersion": "Fabric 7" 


technology": "Brocade Fabric", 
createdAt": "2019-01-21T07:06:07.000+0000", 
updatedAt": "2019-06-26T12:11:08.000+0000", 
technologyVersion": "Fabric 8" 


technology": "FireEye CMS", 

createdAt": "2019-01-21T07:06:07.000+0000", 
updatedAt": "2020-08-27T10:15:52.000+0000", 
technologyVersion": "FireEye CMS 7" 


technology": "FireEye CMS", 

createdAt": "2019-01-21T07:06:07.000+0000", 
updatedAt": "2020-08-27T10:15:51.000+0000", 
technologyVersion": "FireEye CMS 8" 


technology": "HP Printers", 

createdAt": "2020-05-08T05:22:10.000+0000", 
updatedAt": "2020-05-08T05:22:10.000+0000", 
technologyVersion": "HP Printers" 


technology": "HP Safeguard", 

createdAt": "2019-04-02T15:54:19.000+0000", 
updatedAt": "2019-04-02T15:54:19.000-«0000", 
technologyVersion": "HP Safeguard" 


technology": "HPE 3Par OS", 
createdAt": "2019-06-07T08:32:43.000+0000", 
updatedAt": "2019-06-20T01:15:52.000-«0000", 


= 


technologyVersion": "HPE 3Par OS 3" 


technology": "IBM z/OS", 
createdAt": "2020-06-30T11:15:13.000+0000", 
updatedAt": "2020-06-30T11:15:13.000+0000", 
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2" 
), 
{ 
Firewall" 
), 
{ 
), 
{ 


Interceptor 7" 
}, 
{ 


), 


"technologyVersion": 


"technology": 
"createdAt": 
"updatedAt": 


"technologyVersion": 


"technology": 
"createdAt": 
"updatedAt": 


"technologyVersion": 


"technology": 
"createdAt": 
"updatedAt": 


"technologyVersion": 


"technology": 
"createdAt": 
"updatedAt": 


"technologyVersion": 


"technology": 
"createdAt": 
"updatedAt": 


"technologyVersion": 


"technology": 
"createdAt": 
"updatedAt": 


"technologyVersion": 
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"IBM z/OS Security Server RACF 


"Imperva WebApplication Firewall", 
"2019-01-21T07:06:07.000+0000", 
"2019-01-21T07:06:07.000+0000", 


"Imperva WebApplication 


"Juniper IVE", 
"2019-01-21T07:06:07.000+0000", 
"2019-01-21T07:06:07.000+0000", 


"Juniper IVE 8" 


"Riverbed SteelH 
"2020-06-30T11:15: 
"2020-06-30T11:15: 
"Riverbed 


ad", 
13.000+0000", 
13.000+0000", 
SteelHead 


"Riverbed SteelH 
"2019-12-12T06:33: 
"2019-12-12T06:33: 
"Riverbed 


ad", 
06.000+0000", 
06.000+0000", 
SteelHead RiOS 


9" 


"Samsung Printers", 
"2020-05-08T05:22:10.000+0000", 
"2020-05-08T05:22:10.000+0000", 
"Samsung Printers" 


"Symantec ProxySG", 


"2019-06-071 
"2019-06-071 
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[T08:32:43.000+0000", 
[T08:32:43.000+0000", 


"Symantec SGOS 6" 


Provision an Asset 
/ocaapi/v2.0/asset 
[POST] 


To add an asset. 


HTTP Status Code 

- 200: OK 

- 400: Bad Request 

- 401: Unauthorized user 
- 403: Forbidden 

- 404: Not Found 


- 429: Too Many Requests 


Input Parameters 
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dnsName Optional) Enter the domain name. 

hostIP Required) Enter the host IP for the asset to be provisioned. 

mac Optional) Enter mac address for the asset. 

modelName Enter the model name of the asset to be provisioned. This 
parameter input is not required if assetFlowType is set 
DEFAULT. 

netbios (Optional) Enter the netbios of the asset to be provisioned. 

serialNumber Enter the serial number of the asset to be provisioned. This 
parameter input is not required if assetFlowType is set 
DEFAULT. 

technology Required) Technology name of the asset. 

type (Required) Manifest type of asset. 
Allowed values: PolicyCompliance 

uuid (Optional) The UUID of asset to be re-provisioned. This is 


required only during re-provisioning. 


Header Parameters 


assetFlow' Type Provide asset flow type. The default value is "DEFAULT". 

authorization (Required) The token that was generated using the Fetch 
Authentication Token API 

Sample 


Sample Request body: 
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{ 

"dnsName": "string", 
"HOSELP": String”, 
"miae": “string, 
"modelName": "string", 
"netbios": "string", 
"serialNumber": "string", 
"technology": "string", 
"Lype": "string", 

"uuid": "string" 


} 


API Request: 


curl -X POST 'https://«api gateway url»/ocaapi/v2.0/asset' -H 
'assetFlowType: DEFAULT' -H 'Content-Type: application/json' -H 
'Authorization: Bearer «token»' -H 'Content-Type: text/plain' -d 
@request.json 


Response: 
{ 
"code": 200, 
"data": { 
"assetUUID": "663a040b-c9c7-4bee-b4a3-f4f8bf61b8a5" 


), 
"message": "Request for Asset Provisioning sent Successfully." 
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Fetch Asset Status using UUID 
/ocaapi/v2.0/asset/«asset uuid»/status 
[GET] 


Get the current provision status of an asset using UUID. 


HTTP Status Code 

- 200: OK 

- 401: Unauthorized user 
103: Forbidden 

- 404: Not Found 


Input Parameters 


asset uuid (Required) Provide the UUID of the asset. 


Header Parameter 


assetFlow Type Provide asset flow type. The default value is "DEFAULT". 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 


Sample 


Response: 
curl -X GET 
'https://«api gateway url»/ocaapi/v2.0/asset/«asset uuid»/status' 
-H 'assetFlowType: DEFAULT' -H 'Authorization: Bearer <token>' 


Response when the provision is successful: 
{ 


"code": 200, 
"data": { 
"status": "Provision Confirmed" 


} 
Response when the provision is not successful: 


{ 


"code": 200, 
"data": { 
"status": "Provision Requested" 
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Fetch Supported Commands for a Technology 
/ocaapi/v2.0/technology/«technology name»/command/PolicyCompliance 
[GET] 


Get the commands for the specified technology. 


HTTP Status Code 

- 200: OK 

- 401: Unauthorized user 
103: Forbidden 

- 404: Not Found 


Input Parameters 


technology name (Required) The name of the technology for which the 
supported commands are to be fetched 
Note: If you want to fetch supported commands for IBM z/OS 
Security Server RACF 2 technology, use IBM zOS 
Security Server RACF 2 in the API request (without the "/" 
special character). 


Header Parameters 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 


Sample 


Request: 
curl -X GET 
'https://«api gateway url»/ocaapi/v2.0/technology/«technology name 
>/command/PolicyCompliance' -H 'Authorization: Bearer <token>' 


Response: 
{ 
"code": 200, 
"data": { 
"items": [ 


"show running-config" 
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Fetch Supported Commands based on Asset UUID 
/ocaapi/v2.0/asset/«asset uuid»/command/PolicyCompliance 
[GET] 


Get supported commands for a technology using asset UUID. 


HTTP Status Code 

- 200: OK 

- 401: Unauthorized user 
103: Forbidden 

- 404: Not Found 


Input Parameters 


asset uuid (Required) Provide the UUID of the asset. 


Header Parameters 


assetFlow Type Provide asset flow type. The default value is "DEFAULT". 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 


Sample 


Request: 
curl -X GET 
'https://«api gateway url»/ocaapi/v2.0/asset/«asset uuid»/command/ 
PolicyCompliance' -H 'assetFlowType: DEFAULT' -H 'Authorization: 
Bearer <token>' 


Response: 
{ 
"code": 200, 
"data": { 
"items": [ 


"show running-config" 
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Upload Command Output for a UUID 
/ocaapi/v2.0/asset/«asset uuid»/command/output/PolicyCompliance 
[POST] 


Upload the supported command output to Qualys platform for an asset using UUID. These 
commands are uploaded in form of text file or string. 


HTTP Status Code 

- 200: OK 

- 401: Unauthorized user 
- 403: Forbidden 

- 404: Not Found 


Input Parameters 


command (Required) The command output for commands generated 
using the Fetch Supported Commands for a Technology 
API. 

asset uuid (Required) Provide the UUID of the asset. 


Header Parameters 


assetFlowType Provide asset flow type. The default value is "DEFAULT". 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 


Sample 


Request for uploading data through file: 


curl -X POST 

'https://«api gateway url»/ocaapi/v2.0/asset/«asset uuid»/command/ 
output/PolicyCompliance' -H 'assetFlowType: DEFAULT' -H 
'Authorization: Bearer «token»' -F ' show running- 

config-Gfile path' 


Request for uploading the data directly: 


curl -X POST 'https:// «api gateway url»/ocaapi/v2.0/asset/« 
asset uuid >/command/output/PolicyCompliance -H 'assetFlowType: 
DEFAULT' -H 'Authorization: Bearer «token» -F 'show running- 
config- 


version 6.5 

enable secret "***x*x*x*" 
enable bypass 

hostname "Aruba001" 
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clock timezone GMT 0 


banner motd ^ 
' 


Response: 


( 
"code": 200, 
"message": "Command Output Uploaded Successfully." 
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Delete an Asset using UUID 


/ocaapi/v2.0/asset/«asset uuid» 


[DELETE] 


To delete an asset using UUID. 


Note: When you delete an asset, all the configuration data and reports related to the asset 


are also deleted. 


HTTP Status Code 

- 200: OK 

- 400: Bad Request 

- 401: Unauthorized user 
- 403: Forbidden 

- 404: Not Found 


- 503: Service Unavailable 


Input Parameters 


asset uuid 


(Required) Provide the UUID of the asset. 


Header Parameters 


assetFlow Type Provide asset flow type. The default value is "DEFAULT". 

authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 

Sample 

Request: 


curl -X DELETE 


'https://«api gateway url»/ocaapi/v2.0/asset/«asset uuid»' -H 


'assetFlowType: DEFAULT' -H 'Authorization: Bearer <token>' 
Response: 
{ 
"code": 200, 
"data": { 
"assetUUID": "663a040b-c9c7-4bee-b4a3-f4F8bf61b8a5" 
}, 
"message": "Asset(s) Revoked Successfully." 
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Provision Assets in Bulk 
/ocaapi/v2.0/asset/bulk 

[POST] 

To provision more than one asset. 


Note: Using this API, you can provision up to 1000 assets. 


HTTP Status Code 

- 200: OK 

- 400: Bad Request 

- 401: Unauthorized user 


- 403: Forbidden 


- 404: Not Found 


Input Parameters 


data Required) File containing the entries of asset to be 
provisioned. 

Accepted Files: .csv and .txt. 

Example: bulk provision.csv or bulk provision.txt 


manifest types Required) Manifest type of asset. 
Allowed values: PolicyCompliance 


Header Parameters 


assetFlowType Provide asset flow type. The default value is "DEFAULT". 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 


Sample 


Request: 


curl -X POST 

'https://«api gateway url>/ocaapi/v2.0/asset/bulk?manifest types-P 
olicyCompliance' -H 'assetFlowType: DEFAULT' -H 'Authorization: 
Bearer «token»' -H 'Content-Type: multipart/form-data' -F 
"data=@file path' 


Response: Unsuccessful upload response 
{ 


"error": 1 
"code": 400, 
"message": "ERR-2052 - [txt,csv] are supported 
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extension.Please upload file appropriately" 


} 


Response: Successful upload response 


{ 


"code": 200, 
"data": { 
"items": { 

"coune™s -f 
"successfulProvisions": 4, 
"failedProvisions": 0, 
"skipppedProvisions": 0 

), 

"successfulProvisions": [ 


{ 
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"uuid": "cclf2cel-fb4c-40d9-84fe-6a41c33fd0a4", 


"ip": "44.45.36.65", 
"technology": "Fabric 7" 


"uuid": "ae99p9d3-dleb-4004-bea8-4270ac94732c", 


"ip": "44.45.38.89", 
"technology": "Fabric 8" 


"uuid": "a7930435b-5a3b-4007-90f£6-be695ec52eb9", 


"ip": "45.45.34.66", 
"technology": "Fabric 7" 


"uuid": "51fl1ee4a-9f0e-4531-9d3a-5cde9901celp", 


"ip": "44.45.37.62", 
"technology": "Fabric 8" 
} 
l; 
"failedProvisions": [], 
"skippedProvisions": [] 
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Delete Assets in Bulk 
/ocaapi/v2.0/asset/revoke/bulk 
[DELETE] 

To delete more than one assets. 


Note: When you delete an asset, all the configuration data and reports related to the 
assets are also deleted. 


HTTP Status Code 

- 200: OK 

- 400: Bad Request 

- 401: Unauthorized user 


- 403: Forbidden 


- 503: Service Unavailable 


Input Parameters 


assetList (Required) List of assets UUID to be deleted. 


Header Parameters 


assetFlow Type Provide asset flow type. The default value is "DEFAULT". 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 


Sample 


Sample request body: 
{ 


"assetList": [ 
"Ax5bxx573-x145-4182-916x-x3997x9xx259", 
"5xxxx860-25x1-4x8x-x336-8x20x6x1063xx" 


} 

Request: 
curl -X DELETE 
'http://«api gateway url»/ocaapi/v2.0/asset/revoke/bulk' -H 
'assetFlowType: DEFAULT' -H 'Content-Type: application/json' -H 
'Authorization: Bearer «token»' -H 'Content-Type: text/plain' -d 
@request.json 
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Response: 
{ 
"code": 200, 
"data": { 
"items": { 

"successfulRevoke": [ 
"4x5xx573-x145-4182-916x-x3997x9xx259", 
"5xxxx860-25x1-4x8x-x336-8x20x6x163xx" 

l; 

"failedRevoke": [] 
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Re-Provision Asset 

/ocaapi/v2.0/asset 

[POST] 

To re-provision an asset. 

Note: Values for these fields cannot be changed: hostIP, type, technology. All the other 
fields can be updated and the asset can be reprovisioned. 
HTTP Status Code 

- 200: OK 

- 400: Bad Request 

- 401: Unauthorized user 

- 403: Forbidden 

- 404: Not Found 


Input Parameters 


dnsName Optional) Enter the domain name. 

hostIP Required) Enter the host IP for the asset to be re-provisioned. 

mac Optional) Enter mac address for the asset. 

modelName Enter the model name of the asset to be re-provisioned. This 
parameter input is not required if assetFlowType is set 
DEFAULT. 

netbios (Optional) Enter the netbios of the asset to be re-provisioned. 

serialNumber Enter the serial number of the asset to be re-provisioned. This 
parameter input is not required if assetFlowType is set 
DEFAULT. 

technology Required) Technology name of the asset. 

type (Required) Manifest type of asset. 


Allowed values: PolicyCompliance 


uuid (Required) The UUID of asset to be re-provisioned. This is 
required only during re-provisioning. 


Header Parameters 


assetFlow Type Provide asset flow type. The default value is "DEFAULT". 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API 
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Sample 


Request: 


curl -X POST "https://«api gateway url»/ocaapi/v2.0/asset" -H 
"accept: application/json" -H "assetFlowType: DEFAULT" -H 
"Authorization: Bearer «token»" -H "Content-Type: 
application/json" -d "{\"technology\":\"Fabric 
7\",\"dnsName\":\"Fabric 7 

ASSET\", \"hostIP\":\"23.42.52.55\",\"netbios\":\"Web- 

test.com\", \"mac\":\"23-42-55-54-22- 
11\",\"type\":\"PolicyCompliance\", \"uuid\":\"4891f£40f-32c2-47cf- 
9f2f-8eb0calbfcl14\"}" 


Response: 
{ 
"code": 200, 
"data": { 
"assetUUID": "4891f40f-32c2-47/cf-9f2f-8eb0calbfcl4" 
), 
"message": "Request for Asset Reprovisioning sent Successfully." 
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Re-Provision Assets in Bulk 
/ocaapi/v2.0/asset/bulk 

[POST] 

To re-provision an asset in bulk. 


Note: Values for these fields cannot be changed: hostIP, type, technology. All the other 
fields can be updated and the asset can be reprovisioned. 


HTTP Status Code 

- 200: OK 

- 400: Bad Request 

- 401: Unauthorized user 
- 403: Forbidden 

- 404: Not Found 


Input Parameters 


data Required) File containing the entries of asset to be 
provisioned. 

Accepted Files: .csv and .txt. 

Example: bulk provision.csv or bulk provision.txt 


manifest types Required) Manifest type of asset. 
Allowed values: PolicyCompliance 


Header Parameters 


assetFlow Type Provide asset flow type. The default value is "DEFAULT". 


Authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 


Sample 


Request: 


curl -X POST 

'https://«api gateway url»/ocaapi/v2.0/asset/bulk?manifest types-P 
olicyCompliance' -H 'assetFlowType: DEFAULT' -H 'Authorization: 
Bearer «token»' -H 'Content-Type: multipart/form-data' -F 
"data=@file path' 


Response: 


{ 
"code": 200, 
"data": { 
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"items": { 
"count's-1( 
"successfulProvisions": 2, 
"failedProvisions": O0, 
"skipppedProvisions": 0 
}, 
"successfulProvisions": [ 
{ 
"uuid": "4b5fb573-c145-4182-916a-a3997£9F F259", 
wipte MEET S821, 
"technology": "Comware 7" 
Fa 
{ 
"uuid": "5eafe860-25d1-4f8c-a336-8b20a6b163ad", 
wipe MTA B20 My. 
"technology": "Comware 7" 


l; 


"failedProvisions": [], 
"skippedProvisions": [] 
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Get status of assets provisioned within given timeframe 
/ocaapi/v2.0/assets/status/subscription/[(number of days) 
[GET] 


To get the status of the assets provisioned in your subscription within given timeframe. 


HTTP Status Code 

- 200: OK 

- 401: Unauthorized user 
103: Forbidden 

- 404: Not Found 


Input Parameters 


«number of days» (Required) The time-frame for which you would like to fetch 
the data. You can specify a time-frame within the last 30 days 
only. 


Header Parameters 


assetFlow Type Provide asset flow type. The default value is "DEFAULT". 


authorization (Required) The token that was generated using the Fetch 
Authentication Token API. 


Sample 


Request: 


curl -X GET 

'https://«api gateway url»/ocaapi/v2.0/assets/status/subscription/ 
(number of days]' -H 'assetFlowType: DEFAULT' -H 'Authorization: 
Bearer «token»' -H 'Content-Type: application/json' 


Response: 
{ 
"code": 200, 
"data": { 
"items": [ 
{ 
"assetUUID": "3xxxxxx9-245x-4531-x7xx-x84x6386x04x", 
"status": "Provision Confirmed" 
), 
{ 
"assetUUID": "56x98x40-2563-4x56-8789-85x7x6x67112", 
"status": "Provision Confirmed" 
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"assetUUID": "9x5x267x-048x-4612-x3xx-768x346x6£7x", 
"Status": "Provision Confirmed" 


"assetUUID": "640xxxxx-x725-46x2-956x-8028x9x6xx24", 
"status": "Provision Confirmed" 
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